General

  • Target

    693f9e3f8b2c4c4c3bc4ae28feb5af7b9a2a4502805e86388181a31b554db17bN

  • Size

    76KB

  • MD5

    43460e8c5849c0915ebbd17fe8c12cf0

  • SHA1

    eccd5db12b495da90bf1220603b1b369d3245ea0

  • SHA256

    693f9e3f8b2c4c4c3bc4ae28feb5af7b9a2a4502805e86388181a31b554db17b

  • SHA512

    cdf63cfb0186b8be46db2a16faa86f5749c33617d86ec671cfa4835dc7b0f04109f007ad37ae0e2660f3e828c570663f65699ebd6edf6608ca6fab42128fc229

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7Z2sOXgZ:c8y93KQjy7G55riF1cMo03As0gZ

Score
10/10

Malware Config

Signatures

  • Detects Floxif payload 1 IoCs
  • Floxif family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 693f9e3f8b2c4c4c3bc4ae28feb5af7b9a2a4502805e86388181a31b554db17bN
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections